Add CSP domain on collabora ingress

Support
2

Unfortunately there’s no volume in collabora so to make the changes persistent, we need to add a volume. This way this customization will survive updates but the coolwsd.xml is not included in backup so better to keep a copy of coolwsd.xml somewhere, in case you need it after restore.

Enter collabora1 environment: (adapt to your collabora instance name)

runagent -m collabora1

Edit the systemd service file…

systemctl --user edit collabora

…until it looks like this:

### Editing /home/collabora1/.config/systemd/user/collabora.service.d/override.conf
### Anything between here and the comment below will become the new contents of the file

[Service]
ExecStart=
ExecStart=/usr/bin/podman run --conmon-pidfile %t/collabora.pid \
     --cidfile %t/collabora.ctr-id --cgroups=no-conmon \
     --replace -d --name  collabora --cap-add MKNOD \
     --network=slirp4netns \
     --env aliasgroup2=https://${TRAEFIK_HOST}:443 \
     --env username=admin \
     --env-file=%S/state/password.env \
     --env "extra_params=--o:ssl.enable=false --o:ssl.termination=true --o:security.capabilities=false" \
     --env dictionnaries="de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru" \
     --volume config-data:/etc/coolwsd:Z \
     --publish 127.0.0.1:${TCP_PORT}:9980 \
     ${CODE_IMAGE}

### Lines below this comment will be discarded

### /home/collabora1/.config/systemd/user/collabora.service
# [Unit]
# Description=Podman  collabora.service
# 
# [Service]
# Environment=PODMAN_SYSTEMD_UNIT=%n
...

Restart the service:

systemctl --user restart collabora

We added a volume config-data that maps /etc/coolwsd in the container so we should be able to edit the config file.
At line 201 you should find the CSP settings.

podman unshare nano $(podman volume inspect config-data --format={{.Mountpoint}})/coolwsd.xml

Restart the service to apply the changes:

systemctl --user restart collabora